EUVD-2025-179861

Malicious code in castor-cosmology-planetology-toml npm...

Malicious code in thread-link-code-stack-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0332ea06ac8e14a11d6373d745a8c9acfba7cf0627fbf54277743d4d2dcd8414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenology-dione-envconfig-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58446230808fb30c9c6d9ddd433a5054ef4d641b42fc35972fa47ede2fec4431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-nova-meteor-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501435bf55002173c8f7d5b4c21b3d56892072239bd53de9e1caee62f283e9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176229

Malicious code in standard-cygnus-quasarjet-joviology npm...

EUVD-2025-177216

Malicious code in phi-void-long-reject-import npm...

EUVD-2025-178912

Malicious code in figures-proxima-sedna-envconfig npm...

EUVD-2025-177502

Malicious code in oberon-geochronology-yakutsk-neuromorphic npm...

Malicious code in ophiuchus-dactyl-elara-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5943127d4a9fb92d910209f17a3996f3b16a97de9f0a91e5392fe0e6350efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-upgrade-aldebaran-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c001ab99214b4662862b263eac30593a78748adb121c5de870d37a660239fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177403

Malicious code in orogeny-karma-babel-sequelize npm...

Malicious code in auriga-inquirer-tailwindcss-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a752fbbdd28692b5babc67fa080558ecdcad6bd9b3540ae0e2b90d54315ddef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-parallax-aldebaran-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fdac9fb115059473ddb39de7308936fb34fee96693299f3e1aa1c9d0719d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178087

Malicious code in link-sedna-paleomagnetism-npm npm...

EUVD-2025-179480

Malicious code in cryptography-biohacking-xml-graphql npm...

EUVD-2025-179647

Malicious code in command-pulsar-atlas-on npm...

EUVD-2025-178999

Malicious code in eventhoriz-stratosphere-polaris-library npm...

EUVD-2025-179653

Malicious code in command-bootstrap-exoplanetology-paleontology npm...

EUVD-2025-180196

Malicious code in avior-gulp-sagitta-ganymede npm...

Malicious code in native-nashira-seismology-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727447041b626199e98814dfab93fcda621b58917fdb68844e29b0b7d8e48327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...